TMA-SHAREPOINT-3.6
Ensure that SharePoint is configured with "Strict" browser file handling settings
MoyenneNiveau 1Automatiséesharepoint
Description
SharePoint must prevent the execution of prohibited mobile code. Prints the number of web applications whose BrowserFileHandling is not Strict (expected 0). Run on a SharePoint farm server as a farm administrator; the audit loads the Microsoft.SharePoint.PowerShell snap-in and fails if it cannot.
Méthode de vérification
Méthode d'audit: Commande shell
shell
$ErrorActionPreference = 'Stop'; if (-not (Get-Command Get-SPFarm -ErrorAction SilentlyContinue)) { Add-PSSnapin Microsoft.SharePoint.PowerShell -ErrorAction Stop }; if (-not (Get-Command Get-SPFarm -ErrorAction SilentlyContinue)) { throw 'SharePoint cmdlets are not available' }; $bad = @(Get-SPWebApplication -ErrorAction Stop | Where-Object { "$($_.BrowserFileHandling)" -ne 'Strict' }); $bad.Count- Sortie attendue
0
Méthode de correction
Méthode de correction: Recommandation ou correctif d'infrastructure
Central Administration > Manage Web Applications > General Settings > Browser File Handling: Strict (or $wa = Get-SPWebApplication <url>; $wa.BrowserFileHandling = 'Strict'; $wa.Update()).
Propriétés
- Systèmes d'exploitation
- Tous
- Étiquettes
- sharepointweb-applications
- Référence
- CIS Microsoft SharePoint 2019 Benchmark v1.0.0 - 3.6 Ensure that SharePoint is configured with "Strict" browser file handling settings
Vérifier cet hôte
Exécutez cette commande sur une machine que vous êtes autorisé à auditer. L'analyse est en lecture seule.
shell
tmaegis scan --target sharepoint